PT-2010-5170 · Seiko Epson · Lp-S9000+1

Published 2010-12-08 · Updated 2011-03-11 · CVE-2010-3920

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Seiko Epson printer driver installers for LP-S9000 versions prior to 4.1.11 Seiko Epson printer driver installers for LP-S7100 versions prior to 4.1.7

Description The issue allows local users to bypass intended access restrictions and create or modify arbitrary files and directories due to weak permissions set for the "C:Program Files" folder.

Recommendations For Seiko Epson printer driver installers for LP-S9000 versions prior to 4.1.11, update to version 4.1.11 or later. For Seiko Epson printer driver installers for LP-S7100 versions prior to 4.1.7, update to version 4.1.7 or later.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2010-3920

Affected Products

Lp-S7100

Lp-S9000

References · 6

• http://epson.jp/support/misc/lps7100_9000/index.htm · Vendor Advisory
• http://secunia.com/advisories/42540 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-3920 · Security Note
• http://jvn.jp/en/jp/JVN62736872/index.html · Note
• http://osvdb.org/69678 · Note
• http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000059.html · Note